Claims 

1 . (Currently Amended) A method, comprising: 

utilizing, by a consumer device, a public key associated with a component 
downstream from a media playback application to establish establishing a secure 
communication channel between [[a]] the media playback application and [[a]] the 
component downstream from the media playback application , the utilizing establishing 
trust between the media playback application and the downstream component : 

enabling , by the consumer device, the media playback application to instruct the 
downstream component, by a command using the secure communication channel, to 
enable one or more of a number of different types of content protection technologies to 
protect media content that is provided over a physical connector to an output device; 

requesting, by the media playback application of the consumer device , status 
information from the downstream component using the secure communication channel; 
[[and]] 

ascertaining, by the consumer device and based at l east in part on the status 
request, whether the one or more content protection technologies are supported by 
hardware for the particular physical connecto r after the downstream component has 
verified an integrity of the command and the status reguest rr.il: and 

choosing, by the consumer device and based on the ascertaining, to play a 
limited version of the media content if the one or more content protection technologies 
are not wholly supported by hardware for the particular physical connector. 
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2. (Previously Presented) The method of claim 1, further comprising enabling the 
media playback application to instruct the downstream component, using the secure 
communication channel as to how to apply one or more of the different types of content 
protection technologies. 

3. (Original) The method of claim 1, wherein the downstream component 
comprises a software component. 

4. (Canceled) 

5. (Previously Presented) The method of claim 1 , further comprising: 

receiving status information from the downstream component using the secure 
communication channel. 

6. (Previously Presented) The method of claim 1 , further comprising: 

receiving status information from the downstream component using the secure 
communication channel, wherein the status information pertains to instructions that 
were previously sent by the media playback application. 

7. (Previously Presented) The method of claim 1 , further comprising: 

receiving status information from the downstream component using the secure 
communication channel, wherein the status information does not pertain to instructions 
that were previously sent by the media playback application. 
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8. (Canceled) 



9. (Canceled) 

10. (Withdrawn) A system comprising: 
one or more computer-readable media; 

a software component resident on the media and configured to: 

establish a secure communication channel with a media playback 
application; 

use the secure communication channel to receive instructions from the 
media playback application to enable one or more of a number of different types 
of content protection technologies to protect media content that is provided over 
a physical connector; and 

for at least some of the content protection technologies, receive 
instructions to configure the content protection technologies. 

11. (Withdrawn) The system of claim 10, wherein the software component 
comprises a software driver. 

12. (Withdrawn) The system of claim 10, wherein the software component is further 
configured to use the secure communication channel to receive status requests from 
the media playback application. 
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13. (Withdrawn) The system of claim 10, wherein the software component is further 
configured to use the secure communication channel to receive status requests from 
the media playback application, and wherein the software component is further 
configured to use the secure communication channel to send status information to the 
media playback application. 

14. (Withdrawn) The system of claim 10, wherein the software component is further 
configured to use the secure communication channel to receive status requests from 
the media playback application, and wherein the software component is further 
configured to use the secure communication channel to send status information to the 
media playback application, wherein the status information pertains to instructions that 
were previously received from the media playback application. 

15. (Withdrawn) The system of claim 10, wherein the software component is further 
configured to use the secure communication channel to receive status requests from 
the media playback application, and wherein the software component is further 
configured to use the secure communication channel to send status information to the 
media playback application, wherein the status information does not pertain to 
instructions that were previously received from the media playback application. 

1 6. (Withdrawn) A computing system embodying the system of claim 1 0. 
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17. (Withdrawn) A method comprising: 

establishing trust between a media playback application and a downstream 
component; 

establishing a secure channel between the media playback application and the 
downstream component using a public key associated with the downstream component 
to encrypt: 

a random number provided by the downstream component; 
a data integrity key; and 
one or more starting numbers; 
sending the encrypted data to the downstream component; 
using the secure channel to send a command message to the downstream 
component, the command message comprising a data section that contains a 
command, and an authentication section that contains data that can be used to 
authenticate the command; 

using the secure channel to request status information from the downstream 
component; and 

using the secure channel to receive a status message from the downstream 
component, the status message comprising a data section that contains status 
information, and an authentication section that contains data that can be used to 
authenticate the status information. 

1 8. (Withdrawn) The method of claim 1 7, wherein said one or more starting numbers 
comprise a starting status sequence number and a starting command sequence 
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number, said numbers being useable to ascertain, respectively, whether a status 
message or a command message has been lost. 

19. (Withdrawn) The method of claim 17, wherein the act of using the secure 
channel to request status information from the downstream component comprises 
sending, with the request, a random number, and wherein the authentication section of 
the status message comprises data associated with the random number. 

20. (Withdrawn) The method of claim 17, wherein the authentication sections of the 
command message and the status message comprise data that has been processed 
using the data integrity key. 

21 . (Withdrawn) The method of claim 1 7, wherein the command message contains a 
command instructing the downstream component to enable one or more of a number of 
different types of content protection technologies to protect media content that is 
provided over a physical connector. 

22. (Withdrawn) The method of claim 17, wherein the downstream component 
comprises a software driver. 

23. (Withdrawn) One or more computer-readable media having computer-readable 
instructions which, when executed, implement the method of claim 17. 
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24. (Withdrawn) A computing system embodying the one or more computer- 
readable media of claim 23. 

25. (Withdrawn) The method of claim 17 further comprising using the secure 
channel to provide protected media content to the downstream component. 

26. (Withdrawn) A system comprising: 
one or more computer-readable media; 

a software component resident on the media and configured to: 
establish trust with a media playback application; 

establish a secure channel with the media playback application by 
providing a public key associated with the software component to the media 
playback application and receiving back, from the media playback application, 
encrypted data that has been encrypted with the public key, the encrypted data 
comprising: 

a random number previously provided by the software component; 
a data integrity key; and 
one or more starting numbers; 
use the secure channel to receive a command message from the media playback 
application, the command message comprising a data section that contains a 
command, and an authentication section that contains data that can be used to 
authenticate the command; 

use the secure channel to receive status requests from the media playback 
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application; and 

use the secure channel to send a status message to the media playback 
application, the status message comprising a data section that contains status 
information, and an authentication section that contains data that can be used to 
authenticate the status information. 

27. (Withdrawn) The system of claim 26, wherein said one or more starting numbers 
comprise a starting status sequence number and a starting command sequence 
number, said numbers being useable to ascertain, respectively, whether a status 
message or a command message has been lost. 

28. (Withdrawn) The system of claim 26, wherein the authentication sections of the 
command message and the status message comprise data that has been processed 
using the data integrity key. 

29. (Withdrawn) The system of claim 26, wherein the command message contains a 
command instructing the software component to enable one or more of a number of 
different types of content protection technologies to protect media content that is 
provided over a physical connector. 

30. (Withdrawn) The system of claim 26, wherein the command message contains a 
command instructing the software component to enable one or more of a number of 
different types of content protection technologies to protect media content that is 
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provided over a physical connector, and wherein the software component is configured 
to enable a plurality of different types of content protection technologies. 

31 . (Withdrawn) A computing system embodying the system of claim 26. 

32. (Withdrawn) An application program interface (API) embodied on a computer- 
readable media, the API comprising: 

a first method that is callable by a media playback application for establishing 
trust between the media playback application and a software driver component; 

a second method callable by the media playback application for setting up a 
session key between the media playback application and the software driver 
component; 

a third method that is callable by the media playback application to instruct the 
software driver component to enable one or more of a number of different types of 
content protection technologies to protect media content that is provided over a physical 
connector; and 

a fourth method that is callable by the media playback application to request 
status information from the software driver component. 

33. (Withdrawn) The API of claim 32, wherein the first method receives back a 
random number generated by the software driver and a digital certificate. 

34. (Withdrawn) The API of claim 32, wherein the second method provides an 
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encrypted concatenation of a random number provided by graphics hardware, one or 
more session keys, a starting status sequence number, a starting command sequence 
number. 

35. (Withdrawn) The API of claim 32, wherein the API is exposed by a video 
rendering component. 

36. (Withdrawn) A method comprising: 

calling a device driver to create an instance of a content protection device, 
individual content protection devices being associated with individual video sessions 
and serving as an endpoint for communication with a playback application that can send 
commands and status requests to the content protection devices; 

maintaining, with the device driver, a global reference count for each type and 
level of content protection that is applied to protect content; 

maintaining, with at least one content protection device, a local reference count 
for each type and level of content protection applied through the content protection 
device; and 

adjusting the global and local reference counts in accordance with changing 
content protection types or levels. 

37. (Withdrawn) A software architecture comprising: 
one or more computer-readable media; 

software driver code embodied on the computer-readable media and configured 
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to implement multiple content protection devices that are associated with individual 
video sessions and which serve as an endpoint for communication with a playback 
application that can send commands and status requests to the content protection 
devices, wherein the software driver code comprises: 

a first method that can be called to determine if a driver supports content 
protection devices for a given output connector; 

a second method that can be called to create an associated content 
protection device; and 

a third method that can be called to determine a length associated with a 
graphics hardware certificate and to start a video session; 

wherein individual content protection devices support callable methods 
comprising: 

a first method to query a graphics hardware certificate length; 
a second method to return a variable length graphics hardware digital 
certificate; 

a third method for receiving a concatenation of a data integrity session 
key, a starting status sequence number and a starting command sequence 
number all of which are encrypted with a public key associated with the graphics 
hardware; 

a fourth method for receiving a command to change content protection on 
a physical connector associated with the content protection device; and 

a fifth method for querying information about the physical connector being 
used, the type of protection that can be applied to content being transmitted 
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through the physical connector, and the current protection level that is active on 
the physical connector. 

38. (Withdrawn) The architecture of claim 37, wherein the content protection 
device's first method maps directly to the software driver code's third method. 

39. (Withdrawn) The architecture of claim 37, wherein the content protection 
device's second method maps directly to the software driver code's third method. 

40. (Withdrawn) The architecture of claim 37, wherein the content protection 
device's third method maps directly to the software driver code's third method. 

41. (Withdrawn) The architecture of claim 37, wherein the content protection 
device's fourth method maps directly to the software driver code's third method. 

42. (Withdrawn) The architecture of claim 37, wherein the content protection 
device's fifth method maps directly to the software driver code's third method. 

43. (Currently Amended) A system, comprising: 

a consumer device having one or more processors; 

means for utilizing, by the consumer device, a public key associated with a 
component downstream from a media playback application to establish for e stablishing 
a secure communication channel between [[a]] the media playback application and [[a]] 
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the component downstream from the media playback application , the means for utilizing 
establishing a trust between the media playback application and the downstream 
component ; 

means for enabling , by the consumer device, the media playback application to 
instruct the downstream component, by a command using the secure communication 
channel, to enable one or more of a number of different types of content protection 
technologies to protect media content that is provided over a physical connector to an 
output device; 

means for requesting, by the media playback application of the consumer device , 
status information from the downstream component using the secure communication 
channel; [[and]] 

means for ascertaining, by the consumer device and based at least i n part on the 
status request, whether the one or more content protection technologies are supported 
by hardware for the particular physical connecto r after the downstream component has 
verified an integrity of the command and the status reguest rr.il: and 

means for choosing, bv the consumer device and based on the ascertaining, to 
play a limited version of the media content if the one or more content protection 
technologies are not wholly supported bv hardware for the particular physical connector. 

44. (Previously Presented) The system of claim 43, wherein the downstream 
component comprises a software component. 



Serial No.: 10/798,688 

Atty Docket No.: MS1 -2008US 

Atty/Agent: Brett J. Schlameus 



-14- 



lee@hayes The Business of IP* 



www.leehayes.com » 509.324.9256 



45. (Previously Presented) The system of claim 43, wherein the downstream 
component comprises a hardware component. 

46. (Previously Presented) The system of claim 43, wherein the downstream 
component comprises a graphics hardware component. 

47. (Previously Presented) The method of claim 1, wherein the output device is 
either a video display or audio speakers. 

48. (Canceled) 

49. (Currently Amended) The method of claim 1 , further comprising choosing, based 
at loast in part on the ascertaining, to not play the media content if the one or more 
content protection technologies are not wholly supported by hardware for the particular 
physical connector. 

50. (Canceled) 

51. (Currently Amended) The method system of claim [[1]] 43, further comprising 
means for choosing, based at l o ast in part on the ascertaining, to not play the media 
content if the one or more content protection technologies are not wholly supported by 
hardware for the particular physical connector. 
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